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METHOD FOR DETECTING CALLS AND CORRESPONDING UNITS 
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Cross Reference to Related Applications 
[0001] This application is the US National Stage of International Application No. 
PCT/DE03/01398, filed April 30, 2003 and claims the benefit thereof. The International 
Application claims the benefits of German Patent application No. 10220338.5 DE filed 
May 7, 2002, both of the applications are incorporated by reference herein in their entirety. 

Field of Invention 

[0002] The invention relates to a method in which a call request is sent fi-om a calling 
terminal device by way of a signaling unit to a called terminal device in order to enable a 
data transmission between the terminal devices. User data is then transmitted between the 
calling terminal device and the called terminal device, call data for example. For example, 
a detection request is sent to the signaling unit fi'om the called terminal device during the 
data transmission or in conjunction with the signaling relating to the data transmission. For 
example, on the basis of the detection request the signaling unit notes an identifier for the 
calling terminal device, for example the identifier is saved, saving of the identifier is 
initiated or the identifier is output on an output unit. 

Backgroimd of Invention 
[0003] For data transmission networks using circuit-switching, such a method is set down 
in the ITU-T standard (International Telecommunication Union - Telecommunication 
Standardization Sector) - Q.95L7, "Stage 3 description for number identification 
supplementary services using DSS 1: Malicious Call Identification (MCID)". The 
performance feature is used in particular in conjunction with the preparation of legal 
proceedings. 

[0004] In a data transmission network using circuit-switching the data is transmitted in 
time channels ia accordance with a time-division multiplex method. Before data 
transmission takes place, the time channels are through-connected in a connection 
establishment phase and then remain reserved for the terminal devices involved in the call 
for the duration of the call. The data comprises for example call data or video data, such as 
is produced during a videconferencing session. 
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[0005] With regard to the known method, the identifier is a subscriber number whose 
format is set down in the ITU-T standard E.164. The subscriber nxmiber is the means by 
which the calling terminal device, in other words the terminal device which transmits the 
call, can be reached in the circuit-switched data transmission network. 

[0006] With regard to the known method, the signaling mits are switching centers in a 
public telephone network. The signaling units perform signaling in accordance with a 
standardized protocol, in particular as per ISUP (Integrated Services digital network - User 
Part). With regard to the known method, both terminal devices are always situated in the 
circuit-switched data transmission network. 

Summary of Invention 

[0007] The object of the invention is to specify a simple method which serves in particular 
to extend the application area for the "Detection of Calls" performance feature. A 
corresponding terminal device, a corresponding signaling xmit and corresponding 
programs are also to be specified. 

[0008] The object relating to the method is achieved by the method steps set down in 
Claim 1, Developments are set down in the subclaims. 

[0009] With regard to the method according to the invention, the called termmal device is 
a terminal device in a data transmission network. In addition, the signaling unit performs 
signaling in accordance with a signaling protocol which has been defined for data 
transmission in a data transmission network. 

[0010] In a data packet transmission network the data is transmitted in data packets which 
normally have a packet header and a packet body. The packet header contains details about 
the recipient of the data packet. In this way the data packets can be forwarded in the data 
packet transmission network without any additional requirement to establish a connection 
on lower protocol layers. One example of a data packet transmission network is a data 
packet transmission network operating according to the Intemet Protocol, for example the 
Intemet. There are also other data packet transmission networks, however, such as the 
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ATM network (Asynchronous Transfer Mode) for example, in which the data packets are 
also designated as cells. 

[0011] The following are examples of signaling protocols in data packet transmission 
networks: 

[0012] the protocols of the ITU-T H.323 protocol family, in particular the H.225 protocol, 
[0013] the SIP protocol (Session Initiation Protocol) according to RFC 2543 or RFC 
2543bis of the IETF (Intemet Engineering Task Force), or 
[0014] an ATM signaling protocol. 

[0015] The signaling protocols for data transmission in a data packet transmission 
network differ considerably from the signaling protocols for a circuit-switched data 
transmission network and have previously been defined largely independently of these 
signaling protocols. 

[0016] By using the method according to the invention it is possible to achieve the 
situation where the "Detection of Calls" performance feature can then also be employed 
when the called terminal device is situated in a data packet transmission network. The 
application area for the "Detection of Calls" performance feature is thus considerably 
extended because a large proportion of terminal devices are connected to data packet 
transmission networks. The proportion of these terminal devices in the total nvimber of 
terminal devices in circuit-switched data transmission networks and in data packet 
transmission networks continues to increase. 

[0017] With regard to a development of the invention, the detection request is transmitted 
along with a message and/or an information element which has been defined for signaling 
in the data packet transmission network. In the case of the development, a detection 
request is used which was required to be defined additionally for the relevant signaling 
protocol of the signaling unit. 

[0018] With regard to an altemative development, an identifier for the called termmal 
device is preferably stored in the signaling unit in conjunction with the "General Detection 
of Calls" performance feature. Upon arrival of the call request, a check is performed by the 
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signaling unit (44) as to whether the identifier of the terminal device to be called has been 
stored. The identifier of the calling terminal device is noted when the identifier of the 
terminal device to be called (36) has been stored. Therefore, with regard to this 
development there is no need to define a separate detection request and to generate this 
with reference to individual calls. 

[0019] With regard to a development of the method according to the invention, the 
identifier is conveyed to the signaling unit in conjunction with the call request. This action 
makes it possible to note the identifier without it previously needing to have been 
requested by means of a more complex method. 

[0020] With regard to a next development of the method for detecting calls, the calling 
terminal device is a terminal device in a circuit-switched data transmission network. The 
identifier of the calling terminal device is requested as a result of the detection request by 
the signaling unit by way of a network transition unit (used for signaling purposes) to the 
circuit-switched data transmission network with the aid of an identifier request. In order to 
process the identifier request in the circuit-switched data transmission network a 
standardized method is employed, in particular a method in accordance with ITU-T 
standard Q.731.7, "Stage 3 description for number identification supplementary services 
using Signaling System No.7: Malicious Call Identification (MCID)". 

[0021] As an alternative or in a cumulative manner, a method in accordance with BICC 
standard (Bearer Independent Call Control) performance feature set Two (CS2 - Capability 
Set) is used for transmitting the identifier request, see ITU-T Q.1902.1 to Q.1902.6. With 
regard to a next alternative, the identifier request is transmitted according to the SIP-T 
protocol (SIP for Telephones) in accordance with RFC 3204 of the IETF (Internet 
Engineering Task Force). 

[0022] The use of the aforementioned standards offers the facility whereby essentially 
only method steps for requesting the identifier between the network transition unit and the 
signaling xmit still need to be redefined. With regard to conveying the identifier as far as 
the network transition unit, it is possible to make use to a large extent or completely of 
methods which have already been defmed. 
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[0023] The ISUP standard can also extended such that it is suitable for the signaling in 
respect of data transmission from one telephone network by way of a data packet 
transmission network to another telephone network. This extension can also be used if the 
one terminal device is situated in the data packet transmission network. 

[0024] With regard to another development of the method according to the invention, the 
calling terminal device is a terminal device in a data packet transmission network. The 
signaling unit or another signaling unit checks the access authorization of the calling 
terminal device for the data packet transmission network. Signaling imits which perform 
such checks are referred to for example as proxy or gatekeeper. By virtue of the check on 
the access authorization of the calling terminal device, any manipulation of the identifier 
conveyed by the calling terminal device is rendered more difficult. With a high degree of 
probability, the noted identifier thus matches the actual identifier of the calling terminal 
device. 

[0025] With regard to a next development, the detection request is transmitted in an INFO 
message using the INFO method according to de facto standard RFC 2976 of the IETF. 
The INFO message is also referred to as a request. A header section of the INFO message 
or a body section of the INFO message contains an information element which serves to 
uniquely identify the detection request, for example an information element "Printout" 
which is used to request the printout of the identifier in the signaling unit. This 
development is based on the already defined INFO message. Only small extensions are 
thus required in order to implement the method in signaling units and terminal devices. 

[0026] With regard to another development, the detection request is transmitted in a 
message using a method in accordance with an RFC defined for the detection of calls. The 
definition of an additional RFC is useful particularly in a situation when a plurality of 
further information elements are required in conjunction with the method for detecting 
calls. 

[0027] With regard to one embodiment, the occurrence of the message itself is actually the 
request, with the result that no additional information elements are contained in the 
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message in order to identify the detection request. Alternatively, however, the message 
contains in its header or in its body an information element which uniquely identifies the 
detection request. 

[0028] With regard to one development, the following data is also noted in addition to the 

identifier of the calling terminal device: 

[00291 the identifier of the called terminal device, 

[0030] in the case of a call diversion, the identifiers of all terminal devices involved in the 
call diversion, 

[0031] the date and the time of the data transmission, 

[0032] identifiers for the signaling units involved in the call processing, and 

[0033] identifiers which are relevant to the transmission of the user data, for example an 

IP address and the associated RTP port number (Real Tune Protocol) of the network 

transition unit 28 and/or the terminal device 36. 

[0034] The "Detection of Calls" performance feature is upgraded by the storage of the 
additional data. 

[0035] In addition, the invention relates to a terminal device and a signaling unit which are 
suitable for executing the method according to the invention or one of its developments. 
Furthermore, it concems programs which are executed in the terminal device or m the 
signaling unit and are used for executing the method according to the invention or one of 
its developments. Consequently, the aforementioned technical effects apply to the terminal 
device, the signaling unit and the programs. 

Brief Description of the Drawings 
[0036] Embodiments of the invention will be described in the following with reference to 
the attached drawings. In the drawings: 

[0037] Figure 1 shows xmits of a telephone network and of the Internet for data 
transmission between a telephone and a SIP terminal device and also for the associated 
signaling. 
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[0038] Figure 2 shows units of the Internet for data transmission between two SIP 
terminal devices and also for the associated signaling, and 

[0039] Figure 3 shows messages transferred on the Internet for using the "Detection of a 
Call" performance feature. 

Detailed Description of Invention 
[0040] Figure 1 shows a network transition function 10 between a telephone network 12 
and a data packet transmission network 14, the Internet for example. The telephone 
network 12 is for example the telephone network operated by Deutsche Telekom AG. 
Figure 1 shows a telephone 16 of a calling subscriber TlnA, a source switching center 18 
and a transit switching center 20 of the telephone network 12. A subscriber connection line 
22 exists between the terminal device 16 and the source switching center 18. 

[0041] The source switching center 18 is connected to the transit switching center 20 by 
way of a PCM-30 transmission path 24. The call data is transmitted in a time channel, and 
the signaling is carried out in accordance with the ISUP protocol. The source switching 
center 18 and the transit switching center 20 are for example conventional switching 
centers of the EWSD type produced by the company Siemens AG. 

[0042] A PCM-30 transmission path 26 leads from the transit switching center 20 for 
transmitting the user data to a network transition imit 28 which provides a part of the 
network transition function 10. A signaling connection 30 exists between the transit 
switching center 20 and a service provision computer 32 which likewise provides a part of 
the network transition function 10. Signaling takes place on the signaling connection 30 
according to the ISUP protocol. The network transition unit 28 is for example a network 
transition unit of type hiG 1000 from the company SIEMENS AG. The service provision 
computer 32 is a service provision computer of type hiQ 9200 from the company 
SIEMENS AG. 

[0043] The network transition xmit 28 takes voice data, which is received in a PCM 
channel of the transmission path 26, from the PCM channel and packs it into data packets 
which are forwarded in the data packet transmission network 14, for example by way of a 
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transmission path 34 which connects from the network transition unit 28 through the data 
transmission network 14 to a SIP terminal device 36 belonging to a subscriber TbiB. The 
terminal device 36 operates according to the SIP protocol, see de facto standard RFC 
2543. On the other hand, data packets received from the data packet transmission network 
14 are unpacked in the network transition unit 28. The user data contained in the data 
packets is forwarded in a time channel on the transmission path 26. 

[0044] The service provision computer 32 controls the network transition unit 28 with the 
aid of the MGCP protocol (Media Gateway Control Protocol), see RFC 2705 of the IETF. 
Control messages generated in this situation are transmitted by way of a transmission path 
40 which passes through the Intemet for example. 

[0045] The terminal device 36 has an access unit 44 assigned to it which is also referred to 
as a proxy unit. The access unit 44 checks the access authorization of the terminal device 
36 and makes available SIP services, in particular the service for providing the "Detection 
of a Call" performance feature. The access unit 44 is for example an access unit of type 
hiQ 6200 from the company SIEMENS AG. 

[0046] A signaling path 46 exists, for example in a local data transmission network, 
between the terminal device 36 and the access unit 44. Messages are exchanged over the 
signaling path 46 using the SIP protocol. 

[0047] On the other hand, between the access imit 44 and a service provision computer 48 
there exists a signaling path 50 by way of which signaling messages are likewise 
transmitted in accordance with the SIP protocol, for example. The service provision 
computer 48 is also, for example, a service provision computer of type hiQ 9200 from the 
company SIEMENS AG. 

[0048] Between the two service provision computers 32 and 48 there exists a signaling 
path 52 over which signaling messages are transmitted in accordance with the BICC 
standard (Bearer Independent Call Control). If necessary, a so-called call mediation 
network node according to the BICC standard is also included in the signaling path 52. 
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[0049] It is assumed that the subscriber TlnA has already made a malicious call to the 
subscriber TbiB on one occasion. As a result the subscriber TlnB has applied to his SIP 
service provider for the "Detection of a Call on Request" performance feature to be 
enabled. The performance feature has been enabled in the access unit 44 for the subscriber 
ThB. 

[0050] In order to provide the "Detection of Calls" performance feature, the access unit 44 
contains a memory unit 60 in which the acquired data can be stored permanently, and also 
a printer 62 which can be used to have the acquired data printed immediately. The method 
steps carried out with regard to provision of the "Detection of a Call on Request" 
performance feature are described in detail below with reference to Figure 3. 

[0051] In addition, Figure 1 shows a further network transition unit 70 which is situated 
between the Internet 14 and a telephone network 72 to which the terminal device of a 
subscriber TlnC is connected. A transmission path 74 can be used for the exchange of 
control messages according to MGCP and is situated between the network transition unit 
70 and the service provision computer 48. 

[0052] Figure 2 shows the case in which the subscriber TlnA does not use his telephone 
16 but uses a SIP terminal device 100 in order to call the subscriber ThiB. Signaling 
messages can be transmitted between the terminal device 100 and an access unit 102 by 
way of a signaling path 104 according to the SIP protocol. The access unit 102 is likewise 
a proxy unit which checks the access authorization of the terminal device 100 for the data 
transmission network 14. The access unit 102 contains the memory unit 106. 

[0053] Between the access unit 102 and the access unit 44 there exists a signaling path 
108 over which signaling messages are transmitted according to the SIP protocol. 

[0054] Figure 3 shows messages transmitted in the data transmission network 14 when 
using the "Detection of a Call on Request" performance feature. The messages described 
with reference to Figure 3 are exchanged regardless of whether the subscriber TlnA is 
calling from the telephone 16 or from the SIP terminal device 100. The service provision 
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computer 48 is involved in the former case, whereas if the subscriber ThiA calls from the 
SIP terminal device 100 then the access unit 102 is involved. 

[0055] In Figure 3, operations which relate to the access unit 44 are represented with the 
aid of a time shaft 120. Operations which relate to the terminal device 36 are represented 
with the aid of a time shaft 122. Later points in time are situated fiirther down than earlier 
points in time on the time shafts 120 and 122. 

[0056] When subscriber TlnA calls subscriber TlnB, an Invite message 124 which comes 
from the service provision computer 48 or from the access unit 102 is received in the 
access imit 44 at a time tO. The Invite message 124 is processed in the access unit 44 
according to the SIP protocol such that at a time t2 an Invite message 126 is sent from the 
access unit 44 to the terminal device 36. The Invite message also contains the subscriber 
number of the telephone 16 or the Internet address and the port address of the terminal 
device 100, The subscriber number of the telephone 16 or the identifier of the terminal 
device 100 is stored in a working storage facility in the memory unit 60 for the duration of 
call processing. 

[0057] In the terminal device 36 the Invite message 126 is likewise processed in 
accordance with the SIP protocol. According to the protocol, at a point in time t4 a 200- 
OK message 128 is sent by the terminal device 36 as a confirmation to the access unit 44. 

[0058] After receiving the message 128, according to the protocol at a point in time t6 the 
access unit 44 sends a 200-OK message 130 to the service provision computer 48 or to the 
access imit 102. From the side of the service provision computer 48 or the access unit 102, 
according to the protocol at a point in time t8 an ACK message 132 arrives which serves 
to confirm that the data transmission connection can be used. 

[0059] As a result of the message 132, at a point in time tlO the access unit 44 sends an 
ACK message 134 to the terminal device 36 according to the protocol. 

[0060] At a point in time tl2, the subscribers TlnA and TlnB begin to speak to one 
another, whereby call data is transmitted between the telephone 16 and the terminal device 
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36 or between the terminal device 100 and the terminal device 36. The subscriber TlnB 
recognizes the voice of the malicious subscriber TlnA again and presses a function key on 
his terminal device which is linked to the function "Detection of a Call on Request". 
Thereupon at a point in time tl4 the terminal device 36 automatically generates an INFO 
message 136 according to RFC 2976. The message 136 contains a user-specific 
information element "Printout". 

[0061] The INFO message 136 is received and evaluated in the access unit 44. As a result 
of the information element "Printout", at a point in time tl6 the subscriber number of the 
subscriber TbiA which is known in the access xmit 44 or the identifier of the terminal 
device 100 is stored permanently in a non-volatile memory in the memory unit 60, for 
example in a file together with other identifiers which are to be stored for other subscribers 
or only for the subscriber TlnB in conjunction with the "Detection of a Call on Request" 
performance feature. At the same time, this identifier is printed out on the printer 62. 
Permanently means that the data also remains noted after the end of the call between the 
subscriber TlnA and the subscriber TlnB until it is printed out in order then for example to 
be used as evidence in legal proceedings. 

[0062] At a point in time tl8, the access unit 44 confirms the INFO message 136 with the 
aid of a 200-OK message 138. The call between the subscribers TlnA and TlnB is then 
continued, or the subscriber TlnB terminates the call immediately. 

[0063] With regard to another embodiment, in place of the INFO message 136 a SIP 
message "MCID-REG" separately defmed for the "Detection of a Call on Request" 
performance feature is sent. The MCED-REG message also results in the subscriber 
number of the telephone 16 or the Intemet address of the terminal device 100 being 
detected and permanently noted. 

[0064] In place of the signaling protocol on the transmission paths 40 and 74, the 
signaling protocol ITU-T H.248 can also be used for example. 

[0065] In place of the method for data transmission between the telephone network 12 and 
the Intemet 14 described with reference to Figure 1, a different method can also be used, 
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for example the fiinctions of the service provision computer 48 can also be included 
amongst those provided by the service provision computer 32. 

[0066] In place of the method described with reference to Figure 2, other methods can 
likewise be used. For example, fiirther access units can also be incorporated into the 
signaling between the access units 102 and 44. The user data can also be transmitted with 
the aid of the access units 102, 44 or the further access units. 

[0067] With regard to a further embodiment, the "General Detection of Calls" 
performance feature is enabled by the service provider for the subscriber TlnB, for 
example upon application by the subscriber. The identifier of the terminal device 36 is 
noted in a file. Upon receipt of a call, the identifier of the terminal device to be called is 
determined. The file is searched for this identifier. If the identifier is contained in the file, 
then the identifier of the called terminal device is noted, for example stored and/or printed. 
However, if the identifier is not contained in the file, then the identifier of the calling 
terminal device is not permanently noted. The call establishment is carried out regardless 
of the result of the check. With regard to this embodiment, no detection request is required 
fi-om the subscriber TbiB in order to permanently note the subscriber number of the calling 
terminal device. 
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